Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 20, 2025
Malicious code in migu-utils (npm)
- Mar 20, 2025
Malicious code in migu-lib (npm)
14 compromised versions
- Mar 20, 2025
Malicious code in cmft-utils (npm)
6 compromised versions
- Mar 20, 2025
Malware in migu-lib
1 compromised version
- Mar 20, 2025
Malware in migu-utils
1 compromised version
- Mar 20, 2025
Malware in cmft-utils
1 compromised version
- Mar 20, 2025
Malicious code in momo-lib (npm)
1 compromised version
- Mar 20, 2025
Malware in momo-lib
1 compromised version
- Mar 20, 2025
Malicious code in arnotest (npm)
1 compromised version
- Mar 20, 2025
Malicious code in azure-rest-api-specs (npm)
1 compromised version
- Mar 19, 2025
Malicious code in github.com/vainreboot/layout (Go)
- Mar 19, 2025
Malicious code in github.com/utilizedsun/layout (Go)
- Mar 19, 2025
Malicious code in github.com/thankfulmai/hypert (Go)
- Mar 19, 2025
Malicious code in github.com/shallowmulti/hypert (Go)
- Mar 19, 2025
Malicious code in github.com/shadowybulk/hypert (Go)
- Mar 19, 2025
Malicious code in github.com/ornatedoctrin/layout (Go)
- Mar 19, 2025
Malicious code in github.com/belatedplanet/hypert (Go)
- Mar 19, 2025
Malicious code in io.github.leetcrunch:scribejava-core (Maven)
1 compromised version
- Mar 19, 2025
Malicious code in github.com/boltdb-go/bolt (Go)
- Mar 19, 2025
Malicious code in tag-soup-ng (npm)
3 compromised versions
- Mar 19, 2025
Malicious code in yellowcard-styling-config (npm)
2 compromised versions
- Mar 19, 2025
Malicious code in connector-bsb (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in bsb-family-pack (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in bsb-connector (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-v1 (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tools (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tooll (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tool (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tg (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-remot1 (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-remot (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-one (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-bsb (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-bot (PyPI)
2 compromised versions
- Mar 19, 2025
Malicious code in blackspammerbd (PyPI)
2 compromised versions
- Mar 19, 2025
Malicious code in symphony-duplicates (npm)
1 compromised version
- Mar 19, 2025
Malware in stripe-terminal-react-native
1 compromised version
- Mar 19, 2025
Malicious code in pb-node-modules (npm)
3 compromised versions
- Mar 19, 2025
Malware in pb-node-modules
1 compromised version
- Mar 19, 2025
Malicious code in sign-tx (npm)
- Mar 19, 2025
Malicious code in shanye-ethereumjs-utill (npm)
- Mar 19, 2025
Malicious code in ethereum-cryptoshanye (npm)
- Mar 19, 2025
Malicious code in ethereum-cryptog (npm)
- Mar 19, 2025
Malicious code in @shanye3501/curvess (npm)
- Mar 19, 2025
Malware in ethereum-cryptoshanye
1 compromised version
- Mar 19, 2025
Malware in @shanye3501/curvess
1 compromised version
- Mar 19, 2025
Malware in sign-tx
1 compromised version
- Mar 19, 2025
Malware in shanye-ethereumjs-utill
1 compromised version
- Mar 19, 2025
Malware in ethereum-cryptog
1 compromised version
- Mar 19, 2025
Malware in arkoselabs
1 compromised version
Page 6366 of 7,293